CVE-2013-6224 in LiveZilla
Resumen (Inglés)
Multiple cross-site scripting (XSS) vulnerabilities in LiveZilla before 5.1.1.0 allow remote attackers to inject arbitrary web script or HTML via (1) a name in the call administrator feature, (2) unspecified vectors to the admins visitor information panel, or (3) a text message in a chat session, which is saved in the archive section.
Reservar
2013-10-21
Divulgación
2013-12-10
Voces
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerabilidad | CWE | Exp | Con | CVE |
|---|---|---|---|---|---|
| 65715 | LiveZilla secuencias de comandos en sitios cruzados | 79 | Prueba de concepto | Arreglo oficial | CVE-2013-6224 |